CVE-2025-65494: Null Pointer Dereference
NULL pointer dereference in getsanorcnfromcert() in src/coapopenssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted X.509 certificate that causes skGENERALNAMEvalue() to return NULL.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libcoap3to a version that resolves this vulnerability.Fixed in 4.3.4-1.1+deb13u2 - Upgrade
Upgrade
debian/libcoap3to a version that resolves this vulnerability.Fixed in 4.3.5-2 - Upgrade
Upgrade
debian/libcoap3to a version that resolves this vulnerability.Fixed in 4.3.4-1.1+deb13u3Fixed in 4.3.5-4
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65494?
CVE-2025-65494 is classified as a vulnerability that can lead to denial of service.
How do I fix CVE-2025-65494?
To fix CVE-2025-65494, upgrade to a patched version of OISM libcoap that resolves the NULL pointer dereference issue.
What type of attack does CVE-2025-65494 facilitate?
CVE-2025-65494 allows remote attackers to exploit the vulnerability via crafted X.509 certificates.
In which component is CVE-2025-65494 found?
CVE-2025-65494 is found in the get_san_or_cn_from_cert() function in src/coap_openssl.c of OISM libcoap.
What can be the impact of CVE-2025-65494?
The impact of CVE-2025-65494 is a denial of service condition resulting from a NULL pointer dereference.